Diving into Control Flow Guard (CFG) and it's Impact on Exploits!

This stream will cover the userland components and internals of the Control Flow Guard exploit mitigation. CFG was designed to protect indirect function calls and thus prevent the exploitation of bugs like use-after-free vulnerabilities. In addition to some reverse engineering, we are going to check out how CFG impacts our exploits for CVE-2019-0567 and CVE-2024-22058.
Follow nop on Twitter/X at @thenopcode
Check out nop's root cause analysis of the Ivanti vulnerability here: mantodeasecuri...

[@maxmoon3162]

Thanks!

[@itzhexen0]

Oh yeah what did you crack? I'll go crack it too without even watching the video. Give me something to do.

[@OffByOneSecurity]

If you DM me on Discord I'll tell you. discord.gg/offbyonesecurity

[@roguesecurity]

Where to find the link to the private stream?

[@OffByOneSecurity]

What private stream? The one I mention about cracking DRM? That can't be posted here as it violates terms on UA-cam. It was done as a private video on Discord for UA-cam members. If you decide to join as a member you will get access to those types of streams when the happen at times. Thanks!

[@roguesecurity]

@@OffByOneSecurity gotcha. Thanks